topic Re: Forwarder management error in Deployment Architecture

Forwarder management error

vrmandadi — Tue, 11 Dec 2018 17:39:28 GMT

I am getting the below error

The forwarder management interface does not support some settings in your serverclass.conf file. The interface is now read-only.

I was just navigating through the UI and tried creating a new serverclass but did not save anything but still the serverclass is showing in the deployment server.I tried deleting through the CLI in the serverclass.conf but I have not seen that

I have read in some post that it is because of filterType this causes the error.Any suggestions what is the best solution.Below is the stanza I have in few serverclass amd similar issue
machineTypesFilter = linux-i686,linux-x86_64,

https://answers.splunk.com/answers/185547/forwarder-management-issue.html

Re: Forwarder management error

prakash007 — Tue, 29 Sep 2020 22:20:20 GMT

I think the message you are seeing is expected on deployment server, you can't manage all the configs via deployment server web-interface..
check you repositoryLocation on your deloyment server(they usually reside under $SPLUNK_HOME/etc/deployment-apps), whereas on deployment clients they are downloaded under $SPLUNK_HOME/etc/apps

https://docs.splunk.com/Documentation/Splunk/7.2.1/Updating/Createdeploymentapps

Re: Forwarder management error

vrmandadi — Tue, 11 Dec 2018 19:38:01 GMT

What should I need to check specifically

Re: Forwarder management error

vrmandadi — Tue, 11 Dec 2018 19:53:05 GMT

I figured it out .The app created is under
/opt/splunk/etc/apps/search/local/serverclass.conf .I deleted the and the error has gone

Re: Forwarder management error

prakash007 — Tue, 11 Dec 2018 19:55:55 GMT

As you deleted the server class from CLI and If you are still seeing the serverclass you created from deployment-server UI, I would restart splunkd on deployment-server.
what's the exact error you are seeing..??
did you follow the splunkanswers resolution you posted in your question..??